We-comCVEs & Vulnerabilities
3 CVEs affecting We-com products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
municipality portal cms 2opendata cms 1
CVE-2020-15540CRITICAL
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.
5 Jul 2020
9.8
CVSS
CVE-2020-15539CRITICAL
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.
5 Jul 2020
9.8
CVSS
CVE-2020-15538MEDIUM
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.
5 Jul 2020
6.1
CVSS
← PrevPage 1 / 1Next →